URL: https://github.com/freeipa/freeipa/pull/5939 Author: fcami Title: #5939: ipaserver: disable resolved' stub resolver Action: opened
PR body: """ Disable systemd-resolved stub resolver at install time. Use systemd-resolved' maintained list of upstream DNS servers instead.
Rationale: systemd-resolved always resolves the FQDN to the local IP and vice-versa. This breaks DNS zone detection and especially reverse zone detection. This results in --auto-reverse being broken.
On systemd-resolved enabled systems, there are four ways to configure resolv.conf: * a symlink to /run/systemd/resolve/stub-resolv.conf This is the default and uses both the 127.0.0.53 DNS stub plus the search domains. * a symlink to /usr/lib/systemd/resolv.conf This only contains the 127.0.0.53 DNS stub. * a symlink to /run/systemd/resolve/resolv.conf This contains the upstream DNS IPs and bypasses systemd-resolved. * Create and maintain /etc/resolv.conf directly.
Solutions #1 and #2 break DNS zone detection. Solution #4 is not straightforward. Combine Solution3 and 4: copy the file containing the upstream DNS IPs so that it is properly maintained by NetworkManager after installation.
Fixes: https://pagure.io/freeipa/issue/8700 Signed-off-by: François Cami fcami@redhat.com """
To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5939/head:pr5939 git checkout pr5939
URL: https://github.com/freeipa/freeipa/pull/5939 Author: fcami Title: #5939: ipaserver: disable resolved' stub resolver Action: closed
To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5939/head:pr5939 git checkout pr5939
freeipa-devel@lists.fedorahosted.org